escaping sql

[eluser]anggie[/eluser]
according to the user_guide, you should try this..

Code:

$where = "(strcmp(soundex(" . $this->db->escape($username) . "), soundex(klang)) = 0) OR username LIKE '%" . $this->db->escape($username) . "%'";